library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-rust-toolset | May 4, 2022 | Aug 7, 2021 | |
| Alpine Linux | alpine-linux-upgrade-rust | Mar 26, 2024 | Aug 7, 2021 | |
| Centos_linux | — | centos-upgrade-cargocentos-upgrade-cargo-debuginfocentos-upgrade-cargo-doccentos-upgrade-clippycentos-upgrade-clippy-debuginfocentos-upgrade-rlscentos-upgrade-rls-debuginfocentos-upgrade-rustcentos-upgrade-rust-analysiscentos-upgrade-rust-debugger-commoncentos-upgrade-rust-debuginfocentos-upgrade-rust-debugsourcecentos-upgrade-rust-doccentos-upgrade-rust-gdbcentos-upgrade-rust-lldbcentos-upgrade-rust-srccentos-upgrade-rust-std-staticcentos-upgrade-rust-std-static-wasm32-unknown-unknowncentos-upgrade-rust-toolsetcentos-upgrade-rustfmtcentos-upgrade-rustfmt-debuginfo | Nov 10, 2021 | Aug 7, 2021 |
| Debian | debian-upgrade-rustc | Jul 30, 2024 | Aug 7, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-lang-rustgentoo-linux-upgrade-dev-lang-rust-bin | Oct 17, 2022 | Aug 7, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-developer-rust-cargo-1-53-0-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-developer-rust-rustc-1-53-0-11-4-39-0-1-107-0 | Nov 17, 2021 | Aug 7, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-cargooracle-linux-upgrade-cargo-docoracle-linux-upgrade-clippyoracle-linux-upgrade-rlsoracle-linux-upgrade-rustoracle-linux-upgrade-rust-analysisoracle-linux-upgrade-rust-debugger-commonoracle-linux-upgrade-rust-docoracle-linux-upgrade-rustfmtoracle-linux-upgrade-rust-gdboracle-linux-upgrade-rust-lldboracle-linux-upgrade-rust-srcoracle-linux-upgrade-rust-std-staticoracle-linux-upgrade-rust-std-static-wasm32-unknown-unknownoracle-linux-upgrade-rust-toolset | Nov 17, 2021 | Mar 29, 2021 |
| Redhat_linux | redhat-upgrade-cargoredhat-upgrade-cargo-debuginforedhat-upgrade-cargo-docredhat-upgrade-clippyredhat-upgrade-clippy-debuginforedhat-upgrade-rlsredhat-upgrade-rls-debuginforedhat-upgrade-rustredhat-upgrade-rust-analysisredhat-upgrade-rust-debugger-commonredhat-upgrade-rust-debuginforedhat-upgrade-rust-debugsourceredhat-upgrade-rust-docredhat-upgrade-rust-gdbredhat-upgrade-rust-lldbredhat-upgrade-rust-srcredhat-upgrade-rust-std-staticredhat-upgrade-rust-std-static-wasm32-unknown-unknownredhat-upgrade-rust-toolsetredhat-upgrade-rustfmtredhat-upgrade-rustfmt-debuginfo | Nov 10, 2021 | Aug 7, 2021 | |
| Rocky_linux | rocky-upgrade-cargorocky-upgrade-cargo-debuginforocky-upgrade-clippyrocky-upgrade-clippy-debuginforocky-upgrade-rlsrocky-upgrade-rls-debuginforocky-upgrade-rustrocky-upgrade-rust-analysisrocky-upgrade-rust-debuginforocky-upgrade-rust-debugsourcerocky-upgrade-rust-docrocky-upgrade-rust-std-staticrocky-upgrade-rust-std-static-wasm32-unknown-unknownrocky-upgrade-rust-toolsetrocky-upgrade-rustfmtrocky-upgrade-rustfmt-debuginfo | Mar 12, 2024 | Aug 7, 2021 | |
| Ubuntu | ubuntu-upgrade-rustc | Nov 19, 2024 | Aug 7, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub